收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1400多个poc/exp，长期更新。
☆67Jan 7, 2025Updated last year
Alternatives and similar repositories for POC
Users that are interested in POC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- 三色哥斯拉（Godzilla）☆66Dec 27, 2024Updated last year
- 备份的漏洞库，3月开始我们来维护☆2,186Jul 13, 2026Updated last month
- 武器库、渗透测试、红蓝对抗、黑客攻防、目录扫描器、phpmyadmin爆破写一句话☆12Feb 20, 2021Updated 5 years ago
- Satori botnet variant☆14Mar 19, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- APT-GUID☆23Oct 23, 2020Updated 5 years ago
- A simple chrome-extension for website fingerprint extraction☆18May 28, 2025Updated last year
- 自动生成nuclei 2025HW poc☆127Jul 25, 2025Updated last year
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆55Oct 30, 2025Updated 10 months ago
- PHP文件上传50+绕过手法全景解析☆18Mar 16, 2025Updated last year
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated 7 months ago
- JeecgCracker 是一个专门针对 JeecgBoot 框架的密码爆破工具。☆28Oct 29, 2024Updated last year
- 爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应☆767Jul 20, 2023Updated 3 years ago
- Java Vulnerability Exploitation Platform☆2,153Aug 22, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows满足等保的基线核查脚本☆22Oct 9, 2023Updated 2 years ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,584Updated this week
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,074Dec 2, 2025Updated 8 months ago
- ☆62Aug 12, 2023Updated 3 years ago
- JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互U…☆876Jun 9, 2026Updated 2 months ago
- 该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用☆21Jun 22, 2022Updated 4 years ago
- 让fscan再次伟大☆367Aug 13, 2026Updated 2 weeks ago
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆385Oct 29, 2025Updated 10 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 基于已收集指纹库进行识别网站指纹的浏览器插件☆123Jul 30, 2025Updated last year
- (SP)^3: A Simple, Practical, and Safe Packet Spoofing Protocol☆17Mar 13, 2017Updated 9 years ago
- 用于批量扫描远程桌面是否关闭NLA，而后半自动寻找搜狗输入法RCE。☆23Oct 10, 2024Updated last year
- GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具☆123Jan 17, 2025Updated last year
- the metasploit script(POC) about CVE-2021-36260☆20Nov 3, 2021Updated 4 years ago
- IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）☆583Mar 10, 2025Updated last year
- ☆31Nov 1, 2022Updated 3 years ago
- icp备案查询☆406Sep 1, 2023Updated 2 years ago
- Chunsou（春蒐），Python3编写的多线程Web指纹识别工具,适用于安全测试人员前期的资产识别、风险收敛以及企业互联网资产风险摸查。☆397Jul 14, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- cve系列更新☆33Updated this week
- FindSomething本地移植版--HeartK☆97Jul 15, 2025Updated last year
- 用友畅捷通T（TPlus） SQL注入批量POC QVD-2023-13612☆16Jun 28, 2023Updated 3 years ago
- 安全基线☆19Jul 23, 2021Updated 5 years ago
- HFS RCE 利用工具，支持HFS主流版本☆15Jun 13, 2024Updated 2 years ago
- Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)☆116Aug 11, 2026Updated 2 weeks ago
- Modern Cross-Platform Peer-to-Peer Botnet over TOR☆47Sep 13, 2022Updated 3 years ago